Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/25929641-03d2-3c7d-8fc1-3dcebedc9192.roa
File:                     25929641-03d2-3c7d-8fc1-3dcebedc9192.roa (raw, json)
Hash identifier:          UElw4L743viXRQfp/t/aSd18hy7MiVDiEPO208rtTlw=
Subject key identifier:   9B:90:87:2A:9A:A2:6B:E8:61:E5:D0:AC:09:7E:5A:B1:38:8C:CE:07
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F432858499BF4792521429BF198384FE0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/25929641-03d2-3c7d-8fc1-3dcebedc9192.roa
Signing time:             Tue 22 Apr 2025 09:36:42 +0000
ROA not before:           Tue 22 Apr 2025 09:36:42 +0000
ROA not after:            Mon 21 Jul 2025 09:36:42 +0000
asID:                     19905
IP address blocks:        173.26.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9b:f4:79:25:21:42:9b:f1:98:38:4f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 22 09:36:42 2025 GMT
            Not After : Jul 21 09:36:42 2025 GMT
        Subject: CN=f93c6561-a502-43b4-a8cb-a8f0792139aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:88:ec:91:14:d9:04:62:12:05:0e:b2:41:0c:
                    2f:bc:93:1e:1c:36:b5:e7:67:2a:da:50:8d:74:f7:
                    3c:70:0e:c8:52:04:ad:a3:4f:1a:07:e6:4b:e0:0c:
                    95:f2:5f:ae:70:0a:99:63:a5:8d:4e:dc:71:f1:76:
                    3b:19:6a:14:e4:cd:2c:7f:c0:ef:b8:67:89:77:2c:
                    9e:f0:fc:96:58:cf:04:86:73:16:dd:3f:b6:9c:5f:
                    89:e1:4d:8e:c4:c8:7e:b6:a5:97:d8:0c:d6:cc:3e:
                    f6:3e:17:95:fc:c8:4b:6c:5a:51:a7:57:4c:05:5a:
                    98:f3:4c:d2:c1:ed:77:68:45:c6:bb:94:d7:7c:a9:
                    ab:2c:88:16:4b:f5:04:21:fb:bd:eb:65:81:f3:61:
                    22:4e:49:ec:9c:9f:b7:11:a3:5d:96:96:8b:d9:53:
                    7b:bc:f0:5d:94:9c:83:a8:93:52:2f:9a:96:bd:2c:
                    a5:b3:79:06:d3:04:d0:59:48:04:a7:c4:2b:6f:36:
                    02:30:51:31:53:a1:c4:48:08:dd:d2:dd:90:a6:fe:
                    bc:eb:d7:84:4d:c1:c6:ad:bd:b6:5f:14:18:ec:ec:
                    c4:a8:7a:e0:2f:87:5a:f8:c5:9e:4e:f2:80:1e:77:
                    f5:94:7a:3c:2c:66:1d:e7:82:ed:6f:d9:52:a9:2f:
                    79:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:90:87:2A:9A:A2:6B:E8:61:E5:D0:AC:09:7E:5A:B1:38:8C:CE:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/25929641-03d2-3c7d-8fc1-3dcebedc9192.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:e9:3e:ca:56:80:23:b1:e4:d3:45:08:bf:f7:57:9d:ec:a8:
         60:41:1f:8b:4b:af:70:72:df:46:2f:e7:a9:ba:e4:44:33:c2:
         38:f0:a5:ab:2f:2e:b9:af:21:68:9a:71:fd:ba:b8:10:be:24:
         e1:ae:e1:67:80:9d:f4:e1:33:28:61:51:7a:d3:98:b8:52:05:
         8d:b0:17:3b:f7:a1:27:8b:23:8a:9b:3d:f5:2c:ba:ae:03:29:
         84:c0:47:a0:dd:e5:81:3b:0a:3e:84:24:f4:22:f4:8b:ad:47:
         8b:13:e2:1e:ee:71:48:e2:9b:5d:c5:d5:ae:c2:00:5f:10:af:
         42:d4:db:06:0f:e0:35:b1:8e:3f:75:5f:9a:ec:cf:b9:70:1b:
         85:dd:78:23:10:3e:75:3a:90:fe:4e:c2:75:83:b1:c4:c9:25:
         6c:68:9a:1a:33:b1:7e:d3:e5:f9:82:b3:28:c1:34:86:61:b7:
         69:86:4d:c1:ab:d2:5d:bf:37:80:92:38:c6:a6:d1:95:a7:73:
         94:18:36:c6:77:73:84:1a:13:64:ba:f3:d2:78:21:ad:e6:0e:
         a0:fc:e4:23:16:3b:23:c4:61:b6:4e:e4:86:83:9a:25:2d:e9:
         be:7a:ef:70:cd:26:04:f9:38:31:2e:d0:f9:3a:d9:58:2f:ad:
         b7:c5:54:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 00:13:38 2025 by rpki-client